diff --git a/pkg/plugins/trivy/filesystem.go b/pkg/plugins/trivy/filesystem.go
index 8f5383fe..a347028c 100644
--- a/pkg/plugins/trivy/filesystem.go
+++ b/pkg/plugins/trivy/filesystem.go
@@ -77,6 +77,7 @@ func GetPodSpecForStandaloneFSMode(ctx trivyoperator.PluginContext, config Confi
 			MountPath: "/tmp",
 			ReadOnly:  false,
 		},
+		getDockerConfigVolumeMount(),
 	}
 
 	initContainerCopyBinary := corev1.Container{
@@ -138,8 +139,8 @@ func GetPodSpecForStandaloneFSMode(ctx trivyoperator.PluginContext, config Confi
 		},
 	}
 
-	volumeMounts = append(volumeMounts, getScanResultVolumeMount())
-	volumes = append(volumes, getScanResultVolume())
+	volumeMounts = append(volumeMounts, getDockerConfigVolumeMount(), getScanResultVolumeMount())
+	volumes = append(volumes, getDockerConfigVolume(), getScanResultVolume())
 
 	if volume, volumeMount := config.GenerateIgnoreFileVolumeIfAvailable(trivyConfigName); volume != nil && volumeMount != nil {
 		volumes = append(volumes, *volume)
diff --git a/pkg/plugins/trivy/image.go b/pkg/plugins/trivy/image.go
index 4f098c11..fe7fe1ab 100644
--- a/pkg/plugins/trivy/image.go
+++ b/pkg/plugins/trivy/image.go
@@ -114,6 +114,7 @@ func GetPodSpecForStandaloneMode(ctx trivyoperator.PluginContext, config Config,
 				MountPath: "/tmp",
 				ReadOnly:  false,
 			},
+			getDockerConfigVolumeMount(),
 		},
 	}
 
@@ -136,8 +137,8 @@ func GetPodSpecForStandaloneMode(ctx trivyoperator.PluginContext, config Config,
 			},
 		},
 	}
-	volumeMounts = append(volumeMounts, getScanResultVolumeMount())
-	volumes = append(volumes, getScanResultVolume())
+	volumeMounts = append(volumeMounts, getDockerConfigVolumeMount(), getScanResultVolumeMount())
+	volumes = append(volumes, getDockerConfigVolume(), getScanResultVolume())
 
 	if volume, volumeMount := config.GenerateIgnoreFileVolumeIfAvailable(trivyConfigName); volume != nil && volumeMount != nil {
 		volumes = append(volumes, *volume)
diff --git a/pkg/plugins/trivy/plugin.go b/pkg/plugins/trivy/plugin.go
index b7315a62..48cc474f 100644
--- a/pkg/plugins/trivy/plugin.go
+++ b/pkg/plugins/trivy/plugin.go
@@ -128,6 +128,9 @@ func (p *plugin) GetScanJobSpec(ctx trivyoperator.PluginContext, workload client
 }
 
 const (
+	dockerConfigVolumeName      = "docker-config"
+	dockerConfigSecret          = "deckhouse-registry"
+	dockerConfigMountPath       = "/root/.docker"
 	tmpVolumeName               = "tmp"
 	ignoreFileVolumeName        = "ignorefile"
 	sslCertDirVolumeName        = "ssl-cert-dir"
@@ -142,6 +145,29 @@ const (
 	SslCertDir                  = "/var/ssl-cert"
 )
 
+func getDockerConfigVolume() corev1.Volume {
+	return corev1.Volume{
+		Name: dockerConfigVolumeName,
+		VolumeSource: corev1.VolumeSource{
+			Secret: &corev1.SecretVolumeSource{
+				SecretName: dockerConfigSecret,
+				Items: []corev1.KeyToPath{{
+					Key:  ".dockerconfigjson",
+					Path: "config.json",
+				}},
+			},
+		},
+	}
+}
+
+func getDockerConfigVolumeMount() corev1.VolumeMount {
+	return corev1.VolumeMount{
+		Name:      dockerConfigVolumeName,
+		MountPath: dockerConfigMountPath,
+		ReadOnly:  true,
+	}
+}
+
 func (p *plugin) ParseReportData(ctx trivyoperator.PluginContext, imageRef string, logsReader io.ReadCloser) (v1alpha1.VulnerabilityReportData, v1alpha1.ExposedSecretReportData, *v1alpha1.SbomReportData, error) {
 	var vulnReport v1alpha1.VulnerabilityReportData
 	var secretReport v1alpha1.ExposedSecretReportData
